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Abstract. The (2, 3, 7) triangle group is known to be associated with 
a quaternion algebra A/K ramified at two of the three real places of 
K = Q(cos27r/7) and unramified at all other places of K. This triangle 
group and its congruence subgroups thus give rise to various Shimura 
curves and maps between them. We study the genus-1 curves Ab(3), 
Xi(3) associated with the congruence subgroups i~b(3), A (3). Since the 
rational prime 3 is inert in K, the covering Xo(3)/X(l) has degree 28, 
and its Galois closure X(3)/X(l) has geometric Galois group PSL2(F27). 
Since X(l) is rational, the covering Xo(3)/X(l) amounts to a rational 
map of degree 28. We compute this rational map explicitly. We find that 
Xo(3) is an elliptic curve of conductor 147 = 3 • 7 2 over Q, as is the 
Jacobian J7i(3) of Xi(3); that these curves are related by an isogeny of 
degree 13; and that the kernel of the 13- isogeny from Ji(3) to Xo(3) 
consists of /^-rational points. We also use the map Xo(3) — > X(l) to 
locate some complex multiplication (CM) points on X(l). We conclude 
by describing analogous behavior of a few Shimura curves associated with 
quaternion algebras over other cyclic cubic fields. 



1 Introduction 

1.1 Review: Quaternion algebras over K, Shimura modular curves, 
and the (2, 3, 7) triangle group. 

Let K be the field Q(cos27r/7), which is the totally real cubic field of minimal 
discriminant (namely, discriminant 49); let Ok be the ring Z[2cos27r/7] of alge- 
braic integers in K] and let A be a quaternion algebra over K ramified at two 
of the three real places and at no other place of K. This algebra exists because 
the set of ramified places has even cardinality, and is determined uniquely up to 
i-T-algebra isomorphism. (See for instance [Vi] for this and other basic results on 
quaternion algebras and Shimura curves, and |E2j for our computational con- 
text.) All maximal orders in A are conjugate because A is indefinite and Ok 
has narrow class number 1; we fix one maximal order C A. Let r(l) be the 
group of elements of of reduced norm 1. Since A has exactly one unramified 
real place, -T(l) embeds into SL2(R) as a discrete co-compact subgroup. Let 
H be the upper half-plane, with the usual action of PSL 2 (R) = SL 2 (R)/{±1}. 
The quotient of H by r'(l)/{±l} then has the structure of a compact Riemann 
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surface, and thus of an algebraic curve over C. In fact this quotient has a nat- 
ural structure as a curve over K, namely the Shimura curve associated to r (1). 
We call this Shimura curve X(l), in analogy with the modular elliptic curve 
X(l) of the classical theory of elliptic and modular curves: as X(l) parametrizes 
elliptic curves, X(l) parametrizes certain abelian varieties which we shall call 
"C- varieties" Lj By work of Shimura |Shlj , based on the classical work of Fricke 
|Fl|F2j . the group r(l)/{±l} C SL 2 (R) is the (2, 3, 7) triangle group (the group 
generated by products of pairs of reflections in the sides of a hyperbolic triangle 
of angles 7r/2, ir/3, ir/7). Hence X(l) is a curve of genus with elliptic points of 
orders 2, 3, 7. We choose the rational coordinate t : X(l) P 1 that takes the 
values 0, 1, oo respectively at these three points; this determines t uniquely (as 
the classical modular invariant j is determined by its values 1728, 0,oo at the 
elliptic points of orders 2, 3 and the cusp). 

Suppose now that r C r(l)/{±l} is a subgroup of finite index d. Then 
X = TL/ r is a compact Riemann surface with a degree-d map to X(l) that is 
unramified away from the elliptic points of X(l). Composing the map tt : X — > 
X{1) with our isomorphism t : X(l) — ► P 1 yields a rational function t o tt of 
degree d on X that is unramified except above t = 0, t = 1, and t = oo. Such 
a rational function is often called a "Belyi function" on X, in tribute to Belyi's 
theorem Bel that a Riemann surface admits such a function if and only if it 
can be realized as an algebraic curve over Q. It will be convenient, and should 
cause no confusion, to use t also as the notation for this rational function on X. 

In particular, if r is a congruence subgroup of .T(l)/{±1} — that is, if there 
exists a nonzero ideal N of Ok such that r contains the image in .T(l)/{±1} of 
the normal subgroup 

r(N) := {g S r(l) \ g = l mod N0} 

- then X is also a Shimura modular curve, parametrizing O-varieties with 
some level-iV structure. For example, r(N) itself is a congruence subgroup, 
corresponding to a Shimura curve parametrizing O-varieties with full level-JV 

1 Warning: unlike the case of Shimura curves associated with quaternion alge- 
bras over Q, here an O- variety is not simply a principally polarized abelian va- 
riety with endomorphisms by 0. Indeed there can be no abelian variety V with 
End(1/) ® Q = A, because the set of ramified primes of A neither contains nor is 
disjoint from the set of real places oi K. (See for instance [Muj . specifically Thm.l on 
p. 192 (positivity of the Rosati involution) together with the classification in Thm.2 
on p. 201.) The moduli description is quite complicated (see IShllCa] - ). and requires 
an auxiliary quadratic extension K /K, with the field K' totally imaginary; for in- 
stance, for our case K = Q(cos2tt/7) we may take K' = K(y^7) = Q(e 2 ™ /7 ). The 
moduli description yields X(l) as a curve over K' , but fortunately X{\) descends 
to a curve over K independent of the choice of K' . The same is true of the curves 
X(N),Xi(N),X (N) and the maps X(N) -> Xi(N) -* X (N) ~* X(l) (to be in- 
troduced soon) that concern us in this paper, at least provided that the extension 
K' j K satisfies some local conditions at the primes dividing N. I am grateful to Bene- 
dict Gross for explaining these subtleties and suggesting the references to |CalMuj . 
Fortunately very little of this difficult theory is needed for our computations. 
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structure. We call this curve X(N), again in analogy with the classical case. If 
A is a prime ideal with residue field k, the ring 0/N0 is isomorphic with the 
ring Af 2 (k) of 2 x 2 matrices over k, because A is unramified at all finite places 
of k, including A. We choose one isomorphism l : 0/N0 M2(k); the choice 
does not matter because all are equivalent under conjugation by 0*. We then 
obtain congruence subgroups Io(iV) > A (A) 3 F(N), where -To (A) consists of 
those g £ -T(l) for which i(g) is upper triangular, and -Ti(A) is the kernel of 
the map from Io(A) to fc*/{±l} taking g to the top left entry of the matrix 
i(g) mod N0. The corresponding Shimura curves are naturally denoted Xq(N), 
Xi(N) respectively. Once one has formulas for the cover Xq(N) — > X(l), one can 
use them as in [Se] to obtain explicit extensions of K or Q (the latter when the 
residual characteristic of A does not split in Ok) whose normal closures have 
Galois groups PSL 2 (/c), Aut(PGL 2 (£;)), or other groups intermediate between 
these two. 

Analogous to the Atkin-Lehner involution w N of the classical modular curve 
Xo(AT), we have an involution w N ofXo(N), which can be constructed either from 
the normalizer of -To (A) in A* or by invoking the dual isogeny of the "cyclic" 
isogeny between O-varieties parametrized by a generic point of -To (A). Once ex- 
plicit formulas are known for both the map Xq(N) — > X(l) and the involution 
w N , one can easily compute other interesting data. By eliminating p £ Xq(N) 
from the system T± = t(p), T 2 = t(w N (p)), we obtain the "modular polynomial" 
$n{Ti,T2), which is the irreducible polynomial such that ^>jv(£i,i2) = if and 
only if ti,<2 £ C are ^-coordinates of "A-isogenous" points on A'(l). The solu- 
tions of <pN(t,t) — are then coordinates of points of complex multiplication 
(CM) on X(l), that is, points that parametrize O-varieties with CM. Finally, 
with some more effort we can obtain equations defining the recursive tower of 
curves Xo(N n ) (n = 1,2,3,...), whose reduction modulo any prime w of Ok not 
dividing N is asymptotically optimal over the quadratic extension of the residue 
field of w (see |El)). 

If r is a proper normal subgroup, congruence or not, in _T(1)/{±1}, then 
the quotient group G acts on X. By the Riemann-Hurwitz formula, d = \G\ = 
84(g — 1), where g is the genus of X. That is, (X,G) is a "Hurwitz curve": a 
curve of genus g > 1 that attains the Hurwitz bound (jH], see also |ACGH|, Ch.I, 
Ex.F-3 ff., pp. 45-47]) on the number of automorphisms of a curve of genus g over 
a field of characteristic zero. Conversely, all Hurwitz curves arise in this way for 
some proper normal subgroup of r(l). For example, if N is a prime ideal with 
residue field k then X(N) is a curve with G = PSL 2 (fc) that attains the Hurwitz 
bound. 

The first few possibilities for A yield k of size 7, 8, 13, and 27. The first of 
these, with A the prime of K above the totally ramified rational prime 7, yields 
the famed Klein quartic of genus 3, which also arises as the classical modular 
curve X(7) (see |E3j ) . The second, with A above the inert rational prime 2, 
yields the Fricke-Macbeath curve of genus 7 F3 Ma . If A is any of the three 
primes above the split rational prime 13 then X(N) is a curve of genus 14 that 
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can be denned over K but not over Q [Str . In each of those cases, X (N) has 
genus zero. 

The next case, and the main focus of this paper, is the prime of residue field 
F27 above the inert rational prime 3. We call the resulting Shimura curves X (3), 
<%i(3), A"(3). Since this prime is invariant under Gal(AyQ), these Shimura curves 
and their Belyi maps to X(l) (though not the action of PSL2(F27) on <-f (3)) can 
be defined over Q [DNIWoj . Here for the first time X (N) has positive genus; 
we calculate that Ao(3) and X\{"S) both have genus 1. The determination of the 
curve Ao(3), and of its degree-28 Belyi map to X(l) — that is, the degree-28 
function t on Ao(3) — requires techniques beyond those of |E2j . 

In section 2 of this paper, we exhibit equations for this cover and show 
how we compute them. We locate the coefficients to high p-adic precision via 
Newton's method, using p = 29, a prime at which the cover has good reduction 
but some of the coefficients are known in advance modulo p and the rest can 
be determined algebraically. We then compute the simplest rational numbers 
consistent with the p-adic approximations, and prove that they are in fact the 
correct coefficients. The same method, possibly extended by exhaustive searching 
mod p, can be used to compute other such covers. (For instance, we used it to 
compute a previously unknown Shimura-Belyi function of degree 26 connected 
with the (2,3,8) triangle group. We shall give the details of this computation, 
and other Shimura-Belyi maps for the (2,3,8) triangle group, in a later paper.) 

Having obtained equations for the map Aq(3) — + X(l), we use those equations 
as explained above to locate several CM points on X{1). In particular, we confirm 
our conjecture from |E2j for the rational point of CM discriminant —11: we had 
computed its ^-coordinate to high enough precision to convincingly guess it as 
an element of Q, but could not prove this guess. It also follows immediately from 
our formulas that Ao(3) has a Q-rational point, and is thus an elliptic curve. In 
section 3 of this paper, we note some arithmetic properties of this curve, and use 
the modular structure to explain them. In particular, <-fo(3) admits a rational 
13-isogeny to another elliptic curve, which wc identify as the Jacobian of Xi{Z). 
We then also explain why the kernel of the dual isogeny from this Jacobian to 
Ao(3) must consist of X-rational points, a fact first noted via direct computation 
by Mark Watkins [Wa] , 

In the final section we give some other examples suggested by these ideas. 
Watkins later found in the tables of elliptic curves two pairs of 7-isogenous curves, 
of conductors 162 = 2-9 2 and 338 = 2-13 2 , with 7-torsion structure over the cyclic 
cubic fields of discriminant 9 2 and 13 2 . He suggested that each of these pairs 
might thus be the Jacobians of the Shimura modular curves Ao(2), A\(2) for a 
quaternion algebra over the cyclic cubic field of discriminant 9 2 , 13 2 respectively 
that is ramified at two of its three real places and at no finite primes. We verify 
that this suggestion is correct for the curves of conductor 2 • 9 2 , corresponding 
to a subgroup of the (2, 3, 9) triangle group. We cannot at present compute the 
analogous curves and maps for the Shimura curves of level 2 associated with a 
quaternion algebra over the cubic field of conductor 13 2 , though we verify that 
both curves have genus 1. It might be possible to identify the curves using more 
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refined arithmetical information as in |GR|K| . but this would still leave open the 
problems of explicitly computing the maps Xq(2) — > X(l) and wi- 

2 The curve X (3) 
2.1 Preliminaries 

We use the notations of the previous section. Let t be the degree-28 Belyi func- 
tion on X (3). The elements of orders 2, 3, 7 in PSL 2 (F 27 ) act on P 1 (F 27 ) by 
permutations with cycle structure 2 14 , 3 9 1, 7 4 . We denote by Po the unique sim- 
ple zero of (t— 1) on Xq(3) (corresponding to the unique fixed point of an element 
of order 3 in PSL 2 (F 2 7)). Since X (3) and t are defined over Q, so is Po. The 
preimages other than Po of 0, l,oo under t constitute disjoint effective divisors 
-D14, Dg, D 4 , which are the sum of 14, 9, 4 distinct points on X {3) respectively, 
such that 

i*(0) = 2L>i4, t*(l) = 3D 9 + (Po), t*(oo) = 7Di. 

By the Riemann-Hurwitz formula, Xg(3) is a curve of genus 1. We give Xq(3) 
the structure of an elliptic curve by choosing Po as the origin of the group law. 
Since Po is the unique point of Xq(3) parametrizing a cyclic 3-isogeny between 
the order-3 elliptic point t — 1 of X(\) and itself, Po must be fixed under w 3 . 
Therefore w 3 is the unique involution of Xq(3) as an elliptic curve, namely 
multiplication by —1. 

Proposition 1. i) The differential dt has divisor D14 + 2Dg — 8P4. The 
divisors D14, Dg, D4 are linearly equivalent to 14(Po), 9(Po), 4(Po), respectively. 

ii) There are nonzero rational functions P14, Fg, P4 on Ao(3) with divisors 
D14— 14(Po), Dg — 9(Po), D4 — 4(Po). For each choice of Fn, Fg, F4, there exist 
nonzero scalars a, (3 such that Pj^ = aFj + (3Fg and t = FfJaFj. If the F n are 
defined over Q then a, (3 are rational as well. 

Proof: i) Since A?o(3) has genus one, the divisor of dt is linearly equivalent to 
zero. This divisor is regular except for poles of order 8 at the four points of D4. 
Moreover, dt has simple zeros at the points of D14 and double zeros at the points 
of Dg. This accounts for 14 + 2 • 9 = 32 zeros, same as the number 8 • 4 of poles, 
so dt has no further zeros (which we could also have deduced from the fact that 
the map t is unramified when t £ {0, 1, 00}). 

It follows that D14 + 2Dg ~ 8D4. This together with the linear equivalence 
of the divisors t*(0), t*(l), t*(oo) yields our claim that D n ~ n(Po) for each 
n = 14, 9, 4; for instance 

D A = 49£> 4 - 48L> 4 - 7(3£> 9 + (P )) - 6(D U + 2A>) 

= 3(3A> - 2P> 14 ) + 7(P ) ~ -3(P ) + 7(P ) = 4(P ). 

ii) Functions F n with divisors D n — n(Po) exist by part (i). The rational functions 
t and FI4/F4 have the same divisor, so P^/Pj = at for some nonzero scalar a. 
Likewise t—1 and Fg/Fj have the same divisor, so Fg/Fj = a (t — 1) for some 
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nonzero scalar ao- Eliminating t yields the desired identity F? 4 = aF 4 + f3Fg 
with (3 = a /ao - It follows that a, and thus also (3, is rational if each F„ is defined 
over Q. This completes the proof of Proposition 1. ^> 

Now fix a nonzero holomorphic differential uj on Ao(3) defined over Q, and 
define a derivation / i— > /' on the field of rational functions on <%o(3) by df = f'u). 

Proposition 2. i) Let F\ 4 ,Fg,F4 be as in Proposition 1(H). Then F 14 , Fg, 
F 4 are scalar multiples of 

Fg ~ 7F i F 9 ' F u - 7F 4 F u> 2F g F 14 - 3FgF 14 

respectively. 

ii) The functions 

UF g Fj' -lgfjffij 6F 4 F^'-29FjF^ 6F 4 F{' 4 - 43FjF{ 4 

F 4 Fg F14 

on Ab(3) are regular except at Po. 

Proof: i) By Proposition 1 we have t = F^/aFj. Taking the logarithmic 
derivative, we find 

d l = ( 2 ^k _ 7 E±\ w = 2F 4 F{ 4 -7FjF 14 ^ 



F14 F 4 J F4F14 

Since has divisor D14 + 2Dg — 8D4, the divisor of dt/t is 2Dg — D14 — D 4 . Thus 
F4F\4dt/t is a differential with divisor 2_Dg — 18(Po), same as the divisor of Fg. 
Since the divisor of a differential on a genus-one curve is linearly equivalent to 
zero, it follows that 2F 4 F[ 4 — 1F' 4 F 14 is a multiple of Fg, as claimed. The formulas 
for F 14 and Ff are obtained in the same way by computing the logarithmic 
derivatives of t — 1 and t/(t — 1) respectively. 

ii) Each of these is obtained by substituting one of the identities in (i) into 
another. Since the computations are similar and we shall use only the result 
concerning (6F 4 Fg' — 29F 4 Fg)/F g , we prove this result, and again leave the 
other two as exercises. 

We have F u = 71 (3F 4 F^ - 7F' 4 Fg ) and F 9 2 = 72 (2F 4 F{ 4 - 7F' 4 F 14 ) for some 
nonzero scalars 71,72- Hence 

F 9 2 = 7172 (2F 4 (3F 4 Fg 1 - 7F' 4 Fg )' - 7F' 4 {ZF 4 Fg 1 - lF' 4 Fg )) 
= 7172 ((6 F 4 F 9 - 29FiFg[)F 4 + (49Ff - UF 4 Fi')F g ) . 
Dividing by Fg, we find that 

(6F 4 F£ - 29F 4 Fg)^ + (19F' 4 - UF 4 F?) = —F 9 , 

-T9 7172 

which is regular away from P . The same is true for 49F 4 2 — 14F 4 F 4 ', and thus 
also for (6F 4 Fg' — 29F 4 Fg)F 4 /F 9 . Since F 4 and Fg have no common zeros, it 
follows that (6F 4 Fg — 29F 4 Fg)/Fg has no poles except for a multiple pole at Po, 
as claimed. 
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2.2 Computation 

Theorem 1. The curve Xq(3) is isomorphic with the elliptic curve 

y 2 + y = x 3 + x 2 - 44704a: - 3655907. 

The functions F n on this curve may be given by 

F 4 = x 2 - 1208a: - 227671 + 91y, 

F = (8x 3 - 384a; 2 - 13656232a; - 678909344)y 

- (1015a; 4 + 770584a; 3 + 163098512a; 2 + 29785004488a; + 2319185361392), 
F u = 8x 7 + 400071a; 6 - 343453068a; 5 - 238003853192a; 4 

- 116011622641292a; 3 - 15704111899877744a; 2 

- 95316727595264672a; + 53553894620234333456 

- (8428a; 5 + 19974360a; 4 + 18880768004a; 3 + 4128079708928a; 2 

+ 335969653582304a; + 17681731246686360)2/, 

satisfying 

64F 4 7 - 343F 3 = F 2 4 , 

and then 

, F 2 4 343F 3 
64F 4 7 64F 7 ' 

Proof: With a symbolic algebra package one may readily confirm the identity 
among the F n , and might even feasibly (albeit not happily) verify the Galois 
group by following the 28 preimages of a point on the t-line as that point loops 
around t — and t = 1; this would suffice to prove the theorem (since the cover 
Ao(3) — > X(l) is determined by its Galois group and ramification behavior), but 
would not explain the provenance of the formulas. We thus devote most of the 
proof to the computation of the F n . 

We begin by observing that our proofs of Propositions 1 and 2 used the 
ramification behavior of the cover A"o(3) — * X{1), but not its Galois group or the 
Shimura-curve structure. This will remain true in the rest of our computational 
Wc thus show that the ramification behavior uniquely determines the degree-28 
cover. In particular this yields the following purely group-theoretical statement 
(that we could also have checked directly): any permutations a _ 2)°'3j a '7 of 28 
letters with cycle structure 2 14 , 3 9 1, 7 4 such that 0203 07 = 1 are equivalent 
under conjugation in 1S28 with our generators of PSL2(F27), and that we do not 
have to verify the Galois group as suggested in the previous paragraph. 

Our strategy is to first find the cover modulo the prime 29, which occurs in 
one of the formulas in Proposition 2(ii), and then use Newton's method over Q29 

2 We shall retain the notation Ab(3) for the curve and w 3 for the involution, rather 
than introduce separate notations for an elliptic curve that we have not yet identified 
with Xo(3) and the multiplication-by-(— 1) map on the curve. 
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to compute a lift of the coefficients to sufficient 29-adic precision to recognize 
them as rational numbers. The prime 29 is large enough to guarantee good 
reduction of any Belyi cover of degree 28: if a Belyi cover has bad reduction at 
some prime p then the normal closure of the cover has a Galois group whose 
order is a multiple of p [Becj . 

We may assume that each F n (n — 1 4, 9, 4) is scaled so that it has 29-adically 
integral coefficients and does not reduce to zero mod 29. In characteristic 29, the 
second function in Proposition 2(h) simplifies to 6F 4 Fg' / F 9 . Again we use the 
fact that Fj,Fg have no common zeros to conclude that £ := Fg /Fg is regular 
away from Pq. At Pq, we know that Fg has a pole of order 9; thus Fg has a pole 
of order 11, and £ has a double pole. Since £ is regular elsewhere, it follows that 
£ is invariant under w 3 . 

We claim that Fg is anti- invariant, that is, that 103(^9) = — Fg. Indeed the 
differential equation /" — £/ satisfied by Fg must also hold for the invariant 
and anti-invariant parts of Fg, call them Fg", F 9 ~. Now F 9 ~ has a pole of order 9 
at Fn. If Fg 1 " is not identically zero then its valuation at Fo is —d for some 
d G {0, 2, 4, 6, 8}; comparing leading coefficients in the local expansion about Fo 
of F+" = £F+ and Fg" = £F 9 ~, we obtain 9 • 10 = d(d + 1) mod 29, which is 
impossible. Hence Fg 1 " — as claimed. (We could also have obtained Fg*" = by 
arguing that t = 1 is the only supersingular point on X{1) mod 29, whence the 
zeros of Fg, which are the preimages of t = 1, must be permuted by w 3 . But this 
would break our promise not to rely on the modular provenance of the cover.) 

Now let y 2 = x 3 + ax + b be a (narrow) Weierstrass equation for Xq(3), and 
choose lo = dx/y. Then our derivation / 1— > /' is characterized by x' = y and 
y' = (3x 2 +a)/2. For the rest of this paragraph we calculate modulo 29. We have 
seen that Fg is a scalar multiple of {x 3 + s\x 2 + S2X+s^)y for some s\, S2, S3 € F2g. 
Equating coefficients in Fg = £F 9 , we find first that £ = 8a; + 6s 1, then that 
s 2 = — 12sf — 8a and s 3 = 76— 3s 3 — as±, and finally that sib + sf + 9as\ + 9a 2 = 
0. We have also seen that F4 is a scalar multiple of x 2 + t\y + t2x + £4 for 
some ti,t2,t4 £ F2g. Using Proposition 2(i) we compute F14 and Fj 5 up to 
scaling in terms of si, a, b and the £j, and compare with (x 2 + t\y + t2X + t^) 6 . 
After matching the leading (degree-24) coefficients^ we find that the degree-23 
coefficients agree identically, but in degree 22 we find ti = Xl{t\ — s-^, and 
the degree 21 comparison yields t\ = or t\ = 5s 1 . We cannot have t\ = 0, 
for then F4 would be even, and then so would F14 (since F14 is proportional 
to 3F 4 Fg — 7FjF g ) , which is impossible since the nonzero odd function Fg is 
a linear combination of Fj and F 2 ^. Therefore t\ = 5si. Comparing the next 
few coefficients in our two expressions for F4 , we learn that £4 = s 2 + 3a and 
a = 9s 2 . This completes the determination of our cover mod 29 up to scaling. 
For instance, we may use the equation y 2 = x 3 + 9x + 1 for Ao(3) over F2g, and 
then check that 

F 4 = x 2 + lly - Ux - 1, F 9 = (a; 3 + x 2 + 3x - 5)y, 

3 The "degree" of a polynomial in x,y is the order of its pole at Po- The vector 
space of rational functions on Xo(3) that are regular away from Po has basis {x*\i = 
0, 1, 2, . . .} U {x z y\i — 0, 1, 2, . . .}; the monomials x l , x 1 y have degrees 2i, 2i + 3. 
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F u = {x 7 - Ux e - 5x 5 - 9x 4 - 10x 3 + 2x 2 + Wx - 7) - {8x 5 - x 3 - 3x 2 + x + 3)y 

satisfy the identity Fj - 6F 9 3 = F x 2 4 . 

We now use Hensel's lemma to show that there is a unique such identity 
over Z 2 g . To do this we regard uF\ + (3Fg = F 2 4 as an overdetermined system 
of equations in a, b, a,/?, and the coefficients of F4 and Fg. More precisely, we 
eliminate the ambiguity in the various choices of scalar multiples by requiring 
that F4 and Fg each have leading coefficient 1 , setting b = 9a, and defining F14 
by the formula 3F 4 Fg — 7F4F 9 from Proposition 2(i). (Any elements of Z29 that 
reduce to f mod 29 would do for the leading coefficients, as would any element 
of Z29 that reduces to 9 mod 29 for b/a.) We include in our equations the x l 
coefficients of Fg [i = 0, 1, 2, 3, 4), which were known to vanish mod 29 but not 
in Z2g. By our analysis thus far, this system of equations has a unique solution 
mod 29. We compute the Jacobian matrix of our system of equations at that 
solution, and verify that this matrix has full rank. Therefore the solution lifts 
uniquely to Z29 by Hensel's lemma. This is also the unique solution over Q2g, 
because 29 is a prime of good reduction as noted above. 

It remains to recover the coefficients as rational numbers. We compute them 
mod 29 128 by applying a Newton iteration 7 times 29-adically. (At each step, in- 
stead of computing the derivative mod 29 2 " symbolically we approximate each 
partial derivative by evaluating the function mod 29 2 at two points that differ 
by 29 2 times the corresponding unit vector. We also streamline the compu- 
tation by requiring at each step that only the x % coefficients match, ignoring the 
x l y terms; this suffices because the resulting submatrix of the Jacobian matrix 
still has full rank mod 29.) We then use 2-dimensional lattice reduction to guess 
the rational numbers represented by those 29-adic approximations, and verify 
the guess by checking that the resulting Fj , Fg, F 2 4 are Q-linearly dependent. 
This completes the determination of the cover Xq(3) — > X(l) and the proof that 
it is characterized by its degree and ramification behavior. Finally we bring the 
curve y 2 = x 3 + ax + b to minimal form and replace F4 , Fg , F14 by the smallest 
rational multiples that eliminate the denominators of those rational functions. 
This yields the formulas in Theorem I. <^> 

In the same way that we proved Fg is an odd function mod 29, we can use the 
other two formulas in Proposition 2(ii) to prove that F4 and F14 are even mod 13 
and 43 respectively. This is confirmed by Theorem 1: the terms containing y in 
F 4 and F i4 arc divisible by 13 and 43 respectively. The corresponding result for 
Fg mod 29 is obscured by the minimal form of Xq(3), which makes it harder to 
recognize odd functions; but Fg can be seen to be congruent mod 2y + 1 to a 
multiple of 29, as expected. 

2.3 Application: the CM point of discriminant —11 

In |E2| 5.3], we noted that X(l) has a unique CM point of discriminant —11, 
and therefore that this point has rational ^-coordinate. We then described high- 
precision numerical computations that strongly suggest this i-coordinate is 

88983265401189332631297917 _ 7 3 43 2 127 2 139 2 307 2 659 2 11 
45974167834557869095293 ~ 3 3 13 7 83 7 ' 
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with t—1 having numerator 2 9 29 3 41 3 167 3 281 3 . But we could not prove that this 
is correct. Our formulas for the cover Ao(3) — -> X(l) now let us do this: 

Corollary to Theorem 1. The CM-11 point on X(l) has t-coordinate equal 
7 3 43 2 127 2 139 2 307 2 659 2 11/3 3 13 7 83 7 , and lies under the two points of X (Z) with 
(x,y) = (-10099/64, -1/2 ± 109809\/^TT/512). 

Proof: The CM-11 point has two preimages in Xq(3) that are switched 
by w 3 , corresponding to a pair of "3-isogenies" between (the abelian variety 
parametrized by) that point and itself, namely the pair (— 1± \J— ll)/2 of norm-3 
elements of the endomorphism ring. A point of X(l) is 3-isogenous to itself if and 
only if its i-coordinate satisfies t — t(P) = t(w 3 P) for some point P on <%o(3). 
Equivalently, P is either a common pole of the functions t(P),t(w 3 P) on A?o(3) 
or a zero of the rational function t(P) — t(w 3 P) on that curve. The former cannot 
happen here because by our formulas F4 and F4 o w 3 have no common zeros. 
Since t(P) — t(w 3 P) is an odd function on Xq(3), we easily locate its zeros by 
writing it as 2y + 1 times a rational function of x. We find that the latter func- 
tion vanishes at x = 00, x — —1097/8, x = —10099/64, and the roots of four 
irreducible polynomials of degree 3 and two irreducibles of degree 6. At x — 00 
we have P = P and t = 1. At x = -1097/8 we have y=-l/2± 6615\/^2/32, 
and calculate that t = 1092830632334/1694209959, which we already identified 
as the CM-8 point by a similar computation with the curve Xq(2) |E2[ p. 39]. The 
irrational values of x that are roots of the irreducible polynomials of degree 3 
and 6 yield irrational i-values of the same degree. Hence the CM-11 point, being 
rational, must have x = —10099/64, for which we calculate the values of y and t 
given in the statement of the Corollary. <0> 

The CM-8 point also has an element of norm 3 in its endomorphism ring, 
namely 1 + The fact that the CM points with x = -10099/64 have dis- 

criminant — 11 also follows from the fact that their y-coordinates are conjugates 
over Q(V _ 11)- The irrational values of x have degrees 1 and 2 over K; in partic- 
ular, the cubic irrationalities yield four Gal(_ft'/Q)-orbits of CM points. Taking 
c = 2cos(27r/7), we find that these CM points have x-coordinates 189c— 19, 
-(189c 2 + 567c + 397), -2(756c 2 + 1701c + 671), -2(3591c 2 + 8127c + 2939), 
and their Gal(if/Q) conjugates. We determine their CM fields as the fields of 
definition of the points' y-coordinates: they are the fields obtained by adjoin- 
ing to K the square roots of the totally negative algebraic integers c 2 + 2c — 7, 
c- 6, -(3c 2 + 2c + 3), and c 2 - 2c- 11, of norms -167, -239, -251, and -491 
respectively. 

3 The curve ^(3), and its Jacobian J7i(3) 

The tables [BK|Crj of elliptic curves of low conductor indicate that the curve 
147-B2(J), which we identified with Ao(3), is 13-isogenous with another elliptic 
curve over Q, namely 147-B1(I): [0,1,1,-114,473]. Now 13-isogenies between 
elliptic curves over Q, though not hard to find (via a rational parametrization 
of the classical modular curve X (13)), are rare: this 13-isogeny, and its twist 
by Q(V— 7) [curves 147-C1(A) and 147-C2(B)], are the only examples up to 
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conductor 200 |BK] pl even up to conductor 1000, the only other examples are 
the twists of these 13-isogenies by Q(\/— 3), which appear at conductor 441. 
The fact that <-to(3) admits a rational 13-isogeny thus seemed a remarkable 
coincidence. Mark Watkins [Waj observes that this curve 147-B1(I) has an even 
more unusual property: not only is there a 13-isogeny from this curve to Xq(3), 
but the kernel of the isogeny consists of points rational over K. Whereas the 
classical modular curve X (13), which parametrizes (generalized) elliptic curves 
with a rational 13-isogeny, has genus 0, the curve Xi(13), which parametrizes 
(generalized) elliptic curves with a rational 13-torsion point, has genus 2. Thus 
by Mordell-Faltings Xi(13) has only finitely many .K'-rational points. Hence there 
are only finitely many isomorphism classes of elliptic curves defined over if, let 
alone over Q, with a if-rational 13-torsion point — and we have found one of 
then(f| by computing the Jacobian of the Shimura modular curve Ai(3)! 

These observations are explained by considering X\(3). This curve, like Xq(3), 
is defined over Q, and the cyclic cover Ai(3) — > X (3) has degree (3 3 — 1)/2 = 13. 
This cover must be unramified, because the only elliptic point on Xq(3) is of 
order 3, which is coprime to 13. Hence ^i(3) has genus 1. It does not quite follow 
that Xi(3) is isomorphic over Q with the 13-isogenous elliptic curve 147-B1(I), 
because X\(3) need not have any Q-rational point. However, the Jacobian J7i(3) 
of Ai(3) is an elliptic curve, and is also 13-isogenous with Xq(3) because the 
cover Ai(3) — > Ao(3) induces a map of the same degree from J7i (3) to Ab(3). 
Since the elliptic curve 147-B1(I) is the only one 13-isogenous with Xg(3) over Q, 
we conclude that it is isomorphic with J7i(3). Furthermore, the geometric Galois 
group of the cover Ai(3)/Ao(3) is canonically fc*/{±l}, where k is the residue 
field of the prime above 3 in K . Working over K, we can choose a generator 
for this group, which acts on Xi(3) by translation by some element of J7i (3), 
and this element is a 13-torsion point that generates the kernel of the isogeny 
from Jx(3) to X (3). 

This is all quite reminiscent of the situation for the classical modular curves 
Xo(H), Xx(ll), which are 5-isogenous elliptic curves, with the kernel of the 
isogeny X^ll) — ► X (ll) canonically isomorphic with FJ 1 /{±1} and thus con- 

4 Table 4 in |BK| . which gives all curves of conductor 2 a 3 i> , gives several other exam- 
ples of conductor 20736 = 2 s 3 4 , all related by quadratic twists. 

5 Not, however, the unique one. The relevant twist of Xi(13) by K is isomorphic 
with the curve y 2 = 4a; 6 + 8a; 5 + 37a; 4 + 74a; 3 + 57a; 2 + 16a; + 4, which inherits from 
Xi(13) a 3-cycle generated by (x,y) i— ► (— a; -1 — 1, y/x 3 ). Rational points related by 
this 3-cycle and/or the hyperelliptic involution parametrize the same curve, with a 
different choice of generator of the torsion subgroup. The orbit of Q-rational points 
with x G 0, — l,oo yields our curve J7i(3). A computer search finds that there is at 
least one other orbit, represented by (x,y) = (17/16,31585/2048), which leads to a 
second elliptic curve over Q with a if-rational 13-torsion point. We calculate that 
this is the curve with coefficients 

[0, 1, 1, -69819305996260175838254, 7100867435908988429025874812520367] 

and conductor 8480886141 = 3 ■ 7 2 ■ 13 ■ 251 • 17681. 
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sisting of Q-rational 5-torsion points. Also, Xi(ll) has considerably smaller 
height (visible in its smaller coefficients) and discriminant than Xo(ll), as does 
J7i (3) compared with Xg(3). The comparison becomes even clearer if we work 
with models of these curves minimal over K, where the additive reduction at 
the rational prime 7 becomes good reduction at the prime (2 — c) oi K above 7. 

Now for the classical modular curves the fact that Xi(ll) has a simpler 
equation than Xo(ll) illustrates a general phenomenon noted in |Stej : the min- 
imal height in an isogeny class of elliptic curves over Q is conjecturally at- 
tained by the optimal quotient of the Jacobian of Xx(iV), not Xo(-/V) (unless 
the Xi- and Xo-optimal quotients coincide). Does this always happen also for 
Shimura curves? We observed the same behavior in several other cases, one of 
which appears in the next section. But there are no extensive tables of opti- 
mal quotients of Jacobians of Shimura curves on which one might test such a 
conjecture. Although Vatsal |Va[ Thm. 1.11] has proven Stevens' conjecture for 
curves with a rational f-isogeny for prime £ > 7, his methods cannot apply in 
our setting (even though all our curves have a suitable isogeny) because they 
rely on congruences between g-expansions of modular forms, a tool that is not 
available to us in the Shimura-curve setting. 

4 Some other Shimura curves of genus 1 

Watkins notes several other examples of curves in [Crj that behave similarly 
for other choices of cyclic cubic fields K, and asks whether they too, can be 
explained as Shimura modular curves or Jacobians. We checked that this is the 
case for at least one of these examples, at conductor 162 = 2 • 9 2 . In this section, 
we outline this computation and describe a 7-isogeny in conductor 338 = 2 • 13 2 
that should also involve Shimura modular curves. 

For the curves of conductor 162, we start with a quaternion algebra over 
Kg = Q(cos27r/9) ramified at two of the three real places of Kg and at none 
of its finite primes. The resulting modular group -T(l) is again a triangle group, 
this time with signature (2, 3, 9) rather than (2, 3, 7) (see [Tj, class XI). Since the 
rational prime 2 is inert in Kg, we have modular curves Xq(2) and Xi(2) with 
geometric Galois group PSI^Fg) over the rational curve #(1). We calculate 
that here X (2) already has genus 1. Since the Belyi map X (2) — > A'(l) has 
degree as low as 8 + 1 = 9, we can find its coefficients with little difficulty even 
without resorting to the methods we used to obtain the equations in Theorem 1. 
We place the elliptic points of X(l) at t = 1,0, oo. Then t is a rational function 
of degree 9 on X (2) with a ninth-order pole, which we use as the base point P 
to give Xq(2) the structure of an elliptic curve. The zero divisor of t is then 
3Z?3 for some divisor D 3 of degree 3. Hence D 3 — 3(Pq) is a 3-torsion divisor 
on Xq(2). By computing the divisor of dt as in the proof of Proposition l(i), 
we see that the corresponding 3-torsion point on Xq(2) is also the simple zero 
of t — 1. In particular, this 3-torsion point cannot be trivial. (This fact could 
also be deduced by noting that if the 3-torsion point were trivial then t would 
be the cube of a rational function on X (2), and so could not have Galois group 
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PSL^Fg).) The general elliptic curve with a rational 3-torsion point has the form 
y 2 +aixy+a^y = x 3 , with the torsion point at {x, y) = (0, 0). Solving for (a 3 : of) 
and the coefficients of t, we soon find a model of Xq(2) with (ai, 0,3) = (15, 128) 
and t = (y — x 2 — 17x) 3 / (2 14 y), and with the double roots of t — 1 occurring at 
the zeros of (x + 9)y + 6x 2 + 71x other than (0, 0). Reducing Xq(2) to standard 
minimal form, we find the curve 162-B3(I): [1,-1,1,-95,-697]. As expected, 
this curve attains its 3-adic potential good reduction over Kg. The involution W2 
is the unique involution of this elliptic curve that fixes the simple zero (0, —128) 
of t — 1. For instance, W2 sends the point at infinity to the other 3-torsion point 
(0,0), at which t = -17 3 /2 7 . Hence t = -17 3 /2 7 is a CM point on X(l), the 
unique point 2-isogenous with the elliptic point t = oo. Solving t(P) = t(iV2(P)) 
yields the further CM point t = 17 3 5 3 /2 6 , which must have CM field K 9 (y/^7) 
because P and wz(P) are conjugate over Q(\/— 7). 

Besides the known 3-torsion point, we find that Xo(2) also has a 7-isogeny 
with the curve 162-B1(G): [1, —1, 1, —5, 5]. It is known (see for instance the "re- 
marks on isogenies" in [BK)) that the isogeny class of this curve is the unique one, 
up to quadratic twist, with both a 3- and a 7-isogeny over Q. We have already 
accounted for the 3-torsion point using the ramification behavior of the map 
X (2) — > X(\). The 7-isogeny is again explained using X\. This time the cyclic 
cover X\{2) — > Ao(2) has degree 2 3 — 1 = 7, and the only elliptic point of Xq(2) 
is the simple zero of t— 1, which has order 2. Since gcd(2, 7) = 1, the cyclic cover 
is again unramified, and J7i (2) must be an elliptic curve 7-isogenous with X$(2). 
Hence Ji{2) is isomorphic with the elliptic curve 162-B1(G): [1,-1,1,-5,5]. 
Also as before, the kernel of the isogeny must consist of points rational over Kg, 
and again Watkins confirms [Waj that this is the case for this curve. This time 
it turns out J7i (2) is the unique elliptic curve over Q with the correct torsion 
structure: a 3-torsion point over Q, and a 7-torsion point over Kg that is propor- 
tional to its Galois conjugates. Again we note that it is Ji(2), not Xg(2), that 
has the smaller discriminant and height. 

The next case is the cyclic cubic field K13 of discriminant 169 = 13 2 . Once 
more we use a quaternion algebra over this field that is ramified at two of its 
three real places and at none of the finite primes. By Shimizu's formula ([Sh2. 
Appendix], quoted in [TJ p. 207]), the resulting curve X(l) has hyperbolic area 

I ^4 / 1 2 3 CK 13 (2) = -icK 13 (-i). 

Since if 13 is cyclotomic, we can compute Cffi 3 (2) or C-R"i 3 ( — 1) by factoring as 
a product of the Riemann zeta function and two Dirichlet L-series. We find that 
^(1) has normalized hyperbolic area 1/6. Since r(l) is not on Takeuchi's list 
of triangle groups jT], the curve X(l) must have at least four elliptic points, or 
positive genus and at least one elliptic point. The only such configuration that at- 
tains an area as small as 1/6 is genus zero, three elliptic points of order 2, and one 
of order 3. Again we use the prime of K above the inert rational prime 2 to con- 
struct modular curves X (2) and Xi(2) with geometric Galois group PSL 2 (F 8 ) 
over the rational curve -^(1). In the degree-9 cover Xo(2) — > X(l), the ellip- 
tic point of order 3 has 3 triple preimages, and each of the order-2 points has 
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one simple and four double preimages. Hence Xq(2) has genus 1 by Riemann- 
Hurwitz. Again the cyclic cover Xi(2) — > Xq(2) has degree 7, relatively prime to 
the orders of the elliptic points on Xq(2), so Xi(2) also has genus 1. 

In this setting it is not clear that either Xq(2) or Xi(2) is an elliptic curve 
over Q, since neither curve is forced to have a Q-rational divisor of degree 1. 
(The elliptic points of order 2 may be Galois conjugates, not individually ratio- 
nal over Q.) But we can still consider the Jacobians Jo (2) and Ji(2), which are 
elliptic curves 7-isogenous over Q, with the kernel of the 7-isogeny J\ (2) — * J n (2) 
consisting of points rational over K13. Watkins suggests, by analogy with the 
cases of conductor 147 and 162, that this 7-isogeny should connect curves of 
conductor 2 • 13 2 = 338. According to the tables of |Cr| . there are three pairs 
of 7-isogenous curves of conductor 338. Watkins computes that of the 6 curves 
involved in these isogenies, only 338-B1: [1, —1, 1, 137, 2643] has 7-torsion points 
rational over if 13, and thus proposes this curve as J\(2), and the 7-isogenous 
curve 338-B2: [1,-1, 1, -65773, -6478507] as J (2). This must be correct, since 
these Jacobians should again have multiplicative reduction at 2 and good reduc- 
tion at all primes of if 13 other than 2, whence their conductor must be 2 • 13 2 
(there being no curve of conductor 2 over Q). But here I have not obtained an 
explicit rational function or even determined the cross-ratio of the elliptic points 
on X(l), which would be quite a demanding computation using the methods 
of [E2] , 
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